How to Get Money Back After Being Scammed Online

Start here: the first hour decides everything

Scammers move money fast, often within minutes, so the gap between realizing what happened and picking up the phone is the single biggest factor in whether the money comes back. These six steps come before anything else.

1. Stop paying and stop replying. No "one more payment to release the funds." That line is always part of the scam.

2. Contact the bank, card issuer, or app that moved the money. Use the number on the back of the card or inside the official app, never a number the scammer provided.

3. Use the words that route the call to the right team. For cards, "dispute a fraudulent charge." For wires, "a fraudulent wire transfer." For Zelle, "an imposter scam."

4. Freeze or lock the card and account. The bank can block the card, stop any pending transfers, and put the account on fraud watch.

5. Write down the timeline while it is fresh. Amounts, dates, times, names, phone numbers, reference numbers, and screenshots of every message.

6. File the reports the same day at reportfraud.ftc.gov and ic3.gov. They create the paper trail banks and investigators rely on.

The odds depend on how the money moved

There is no single refund button for an online scam. What can be clawed back depends almost entirely on the rails the money traveled on, and the protections attached to each one are wildly different. The table below is the fastest way to read the odds and the right thing to say.

Odds describe the realistic chance of recovery when action is fast and the payment fits the protection listed. None of this is a guarantee, and none of it covers money sent after the warning signs appear.

The pattern in one glance. Card payments and fast wire recalls sit at the recoverable end, while money sent by bank transfer, gift card, or crypto rarely comes back. Same loss, very different odds, decided mostly by the payment rail.

Scammed by a fake online store?

Fake storefronts are their own category, and the unsettling part is how ordinary they look now: polished product pages, real-looking tracking numbers, and social ads for genuinely desirable brands. The good news is they are far more beatable than a wire or crypto transfer, as long as the payment went on a card or PayPal. The trick is naming what actually happened and disputing it with the right words.

REAL CASE

The $99 sneaker deal that never shipped

• 490 reports to the BBB about fake HOKA shoe sales

• $99 for three pairs that normally cost $100-plus each

• 12 weeks of real-looking tracking before nothing arrived

In early 2024, the Better Business Bureau logged nearly 490 reports about fake sales of one hot item alone: HOKA running shoes. One came from a shopper in Sacramento who spotted a Facebook ad offering three pairs for $99, well under the $100-plus each pair normally costs. He ordered, received a real-looking tracking number, and only then noticed the parcel was shipping from China. The tracking even updated for weeks. Then, once it supposedly reached the US, the shoes never arrived and no refund came. Nearly every fake-HOKA report started the same way, on social media, and the storefront behind the ad is the part worth learning to read.

Signs the site was fake

•  A hot item at a price no legitimate seller matches, sold by an unfamiliar store.

• The domain is brand-new, or a familiar brand name with an odd spelling or extension (.shop, .top, a country code that makes no sense).

• A search of the store name alongside "scam," "reviews," and "complaints" surfaces real problems fast, and a store with no off-site footprint at all is its own red flag.

• The only way to reach them is a contact form: no real address, no working phone, no monitored email.

• Checkout steers toward bank transfer, Zelle, crypto, or a payment page that feels off. These carry the least buyer protection.

• A confirmation and tracking number arrive, but the parcel ships from overseas and tracking never resolves to a real delivery.

• Reviews and testimonials live only on the site itself, easily lifted from real brands.

The address bar is evidence. Most fake stores give themselves away in the domain long before checkout.

• The real brand name is buried in the middle, not the domain. A genuine HOKA store lives on hoka.com, not inside a longer invented address.

• Filler words like "clearance," "outlet," "official," or "deals" are bolted on to borrow trust.

• Throwaway extensions such as .top, .shop, or .buzz are cheap to register and common in scam stores.

• The padlock only means the connection is encrypted, not that the seller is honest. Fake stores have padlocks too.

How to recover the money

1.  Screenshot everything before the site vanishes. Fake stores disappear fast. Save the product page, order confirmation, receipts, emails, and the full URL.

2. Card payment? Dispute it as "item not received" or "not as described," not just "fraud." That is the wording Visa and Mastercard act on against a merchant that took the money and delivered nothing. A non-delivery claim generally has up to 120 days from the transaction.

3.  PayPal goods and services? Open a Resolution Center dispute for an item not received. Friends-and-family sends are not covered, which is exactly why a fake store steering buyers there is a red flag.

4.  Card entered on the checkout? Treat it as compromised. Contact the issuer to freeze or replace the card, since the number was likely captured for resale.

5.  Report the site. File with the FTC at reportfraud.ftc.gov, add an IC3 report at ic3.gov if the card was stolen, and flag the domain to Google Safe Browsing to help get it taken down.

The reassuring half: even when a fake site is this convincing, paying by card turns it into a winnable dispute, because the loss is a service failure, goods that never arrived, which is exactly what chargeback rules were built for.

Authorized or unauthorized: the line banks care about

On that first call, the bank’s first decision is whether the transaction was unauthorized (someone used the card or account without permission) or authorized (the money was sent willingly, even though under deception). It sounds like a technicality. It is the whole game.

This is why the same $2,000 loss can be fully refunded on a credit card and nearly impossible to recover over Zelle. Politeness with persistence helps, and when the money moved by bank transfer, it is worth asking specifically whether an imposter-scam policy applies rather than accepting a blanket "the payment was authorized" denial.

Why cards win. A chargeback runs on the card network’s own rules, not the seller’s goodwill, which is what turns a fake or non-delivering merchant into a winnable dispute. The window is usually up to 120 days from the transaction.

What to say on the call

Fraud lines run on scripts, so giving the representative the right language reaches the right team faster and frames the case correctly. Short and factual works best, with the relevant amounts and dates filled in.

A reference number and the representative’s name are worth getting on every call, along with everything in writing. If the first person says no, escalating to the fraud or claims department is the next step, together with asking whether the case was reviewed against the specific imposter-scam policy.

Wired the money? The clock runs 72 hours

Wire transfers feel final, and often they are, but there is a real government mechanism that has clawed back serious money when victims move fast. The FBI’s Internet Crime Complaint Center runs a Recovery Asset Team that can freeze fraudulent transfers through a process called the Financial Fraud Kill Chain.

The freeze works, but only inside the window

• ~3,900 emergency freezes the FBI team triggered in 2025

• $679 million frozen out of roughly $1.2 billion in attempted theft it could chase

• 72 hours the window before funds are split, moved overseas, or converted to crypto

The mechanism has traditionally focused on larger wires (around $50,000 and up) and international transfers with a SWIFT recall, but reporting is worthwhile regardless of the amount. The steps: contact the bank, use the exact phrase "fraudulent wire transfer," and file at ic3.gov the same day with the amount, date, receiving bank, and account number. Then request a Hold Harmless Letter or Letter of Indemnity from the bank to support the recall, and contact the local FBI field office in parallel so a person is on it faster.

The second scam: fake "recovery" services

Unsolicited offers to recover the money are another scam

This is the cruelest part of the whole ecosystem, and the most important to remember. The moment a loss is posted about or a report is filed, a second wave of scammers goes looking for the victim. They call themselves recovery agents, blockchain forensics experts, or lawyers, and they promise to get the money back for an upfront fee. The FBI has issued repeated warnings about this, including a 2025 alert about fake law firms impersonating real attorneys to target victims a second time.

• They made contact first, on social media, in comment sections, or by direct message.

• They ask for an upfront fee, a "release fee," or "taxes" before returning anything.

• They want payment in crypto or gift cards.

• They claim to work with the FBI, SEC, or a government agency. No agency authorizes private firms to recover funds for a fee.

• They guarantee results, or show glowing "success stories" from strangers.

The rule is simple: unsolicited contact means do not pay. Real investigators never charge victims, and legitimate lawyers do not cold-message people promising a guaranteed recovery.

Where to report, and why it still matters

Even when the money is gone, reporting is not a formality. Reports feed the databases that trigger investigations, freezes, and refund programs, and a documented report is often exactly what a bank needs to process a claim.

The scale of it (and why fast reporting works)

Feeling foolish is the wrong instinct here. This is mass-industrial crime, and the numbers are staggering. Every victim is one of millions, which is exactly why fast, precise reports matter: the details help connect the dots that take these operations down.

The honest bottom line

After thousands of these cases, one pattern holds. Recovery is real, but it is not the norm, and almost everything hinges on the first hour. The victims who get their money back are rarely the ones with the strongest case. They are the ones who called the bank before the shock had worn off, used the right words, and filed the reports the same day.

When a scam has just happened, the move is to make the call now. Follow the order at the top of this guide, stay polite and persistent, and get everything in writing. Money that traveled by credit card or a fast wire recall has genuinely decent odds. Money sent by gift card, Zelle, or crypto calls for tempered expectations but still warrants action, because a filed report is what protects the next person and occasionally brings a freeze in time.

Going forward, the cheapest protection is a habit. Before a purchase from an unfamiliar store, running its address through a site-safety scanner like Sitescano flags the obvious fakes before any card details are entered. Thirty seconds up front beats a chargeback later.

And whatever happens, anyone who slides into the inbox promising to get it all back for a fee should be ignored. That is not recovery. That is the sequel to the scam. The only names worth trusting are the bank, the FTC, and the FBI, and not one of them will ever charge for help.